You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@wicket.apache.org by "Hans Schäfer (Jira)" <ji...@apache.org> on 2021/04/14 15:42:00 UTC

[jira] [Commented] (WICKET-6832) CSP support in Java 8

    [ https://issues.apache.org/jira/browse/WICKET-6832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17321100#comment-17321100 ] 

Hans Schäfer commented on WICKET-6832:
--------------------------------------

Hi, 

perhaps another unexpected perspecitive: Please do NOT backport CSP to Wicket 8. Its the perfect trigger for me for getting a more modern stack. Some departments are complaining about missing CSP, they are my best friends now: "I can activate CSP in Wicket 9 but this requires Java 11" ;)

Kind regards

Hans

 

> CSP support in Java 8
> ---------------------
>
>                 Key: WICKET-6832
>                 URL: https://issues.apache.org/jira/browse/WICKET-6832
>             Project: Wicket
>          Issue Type: New Feature
>          Components: wicket
>    Affects Versions: 9.0.0, 8.9.0
>            Reporter: Ashley Reed
>            Priority: Major
>
> Wicket needs Content-Security-Policy support in Java 8 as it is it the most popular version of Java used in production. Wicket 9 has CSP support, but requires Java 11. Wicket 8 runs on Java 8, but has no CSP support. Need to either add Java 8 support to Wicket 9 or add CSP support to Wicket 8.
>  
> Evidence that Java 8 is still very popular:
> [https://blog.newrelic.com/technology/state-of-java/]
>  [https://www.jrebel.com/blog/2020-java-technology-report]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)